agentprime: sgl-project-sglangEvery new CVE for sgl-project-sglang.https://agentprime.io/CVE-2026-112270: SGLang through 0.5.22 Memory Exhaustion via Mooncake STAGING_RSP chunk_idxhttps://agentprime.io/advisories/CVE-2026-112270/https://agentprime.io/advisories/CVE-2026-112270/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 13:55:18 GMTCVECVE-2026-112269: SGLang through 0.5.22 Memory Exhaustion via Unauthenticated Mooncake Decode Registrationshttps://agentprime.io/advisories/CVE-2026-112269/https://agentprime.io/advisories/CVE-2026-112269/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 13:55:17 GMTCVECVE-2026-112267: SGLang through 0.5.22 SSRF via bootstrap_host and bootstrap_port on Decode Workerhttps://agentprime.io/advisories/CVE-2026-112267/https://agentprime.io/advisories/CVE-2026-112267/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 13:55:16 GMTCVECVE-2026-112266: SGLang through 0.5.22 Cross-Request Abort via rid Prefix Matchinghttps://agentprime.io/advisories/CVE-2026-112266/https://agentprime.io/advisories/CVE-2026-112266/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 13:55:15 GMTCVECVE-2026-112083: sgl-project SGLang Weight Exporter weight_exporter.py WeightExporter.send_weights_to_remote_instance denial of servicehttps://agentprime.io/advisories/CVE-2026-112083/https://agentprime.io/advisories/CVE-2026-112083/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 05:45:18 GMTCVECVE-2026-112082: sgl-project SGLang Expert-Distribution Recording Endpoint expert_distribution.py Scheduler.expert_distribution_handle denial of servicehttps://agentprime.io/advisories/CVE-2026-112082/https://agentprime.io/advisories/CVE-2026-112082/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 05:30:22 GMTCVECVE-2026-111392: SGLang through 0.5.21 KV Cache Poisoning via mm_hashes in /generatehttps://agentprime.io/advisories/CVE-2026-111392/https://agentprime.io/advisories/CVE-2026-111392/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 17:38:44 GMTCVECVE-2026-111391: SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filterhttps://agentprime.io/advisories/CVE-2026-111391/https://agentprime.io/advisories/CVE-2026-111391/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 11:41:52 GMTCVEcriticalCVE-2026-110809: sgl-project SGLang Session Cleanup session_controller.py Session.create_req denial of servicehttps://agentprime.io/advisories/CVE-2026-110809/https://agentprime.io/advisories/CVE-2026-110809/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 23:30:21 GMTCVECVE-2026-110807: sgl-project SGLang generate Endpoint io_struct.py denial of servicehttps://agentprime.io/advisories/CVE-2026-110807/https://agentprime.io/advisories/CVE-2026-110807/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 23:00:19 GMTCVECVE-2026-109229: SGLang through 0.5.21 Decompression Bomb DoS via NanoNemotronVLImageProcessorhttps://agentprime.io/advisories/CVE-2026-109229/https://agentprime.io/advisories/CVE-2026-109229/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 14:04:32 GMTCVECVE-2026-109228: SGLang through 0.5.21 Resource Budget Bypass via GLM-V Video Parametershttps://agentprime.io/advisories/CVE-2026-109228/https://agentprime.io/advisories/CVE-2026-109228/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 14:04:32 GMTCVECVE-2026-109227: SGLang through 0.5.21 Memory Exhaustion DoS via Qwen-VL Video Preprocessinghttps://agentprime.io/advisories/CVE-2026-109227/https://agentprime.io/advisories/CVE-2026-109227/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 14:04:31 GMTCVECVE-2026-109226: SGLang through 0.5.21 Audio Decompression Amplification via load_audiohttps://agentprime.io/advisories/CVE-2026-109226/https://agentprime.io/advisories/CVE-2026-109226/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 14:04:30 GMTCVECVE-2026-109225: SGLang through 0.5.21 Memory Exhaustion DoS via /v1/audio/transcriptions Uploadhttps://agentprime.io/advisories/CVE-2026-109225/https://agentprime.io/advisories/CVE-2026-109225/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 14:04:29 GMTCVECVE-2026-105245: sgl-project sglang HTTP Endpoint http_server.py server_info cleartext transmissionhttps://agentprime.io/advisories/CVE-2026-105245/https://agentprime.io/advisories/CVE-2026-105245/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 06:30:14 GMTCVECVE-2026-102634: SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_roomhttps://agentprime.io/advisories/CVE-2026-102634/https://agentprime.io/advisories/CVE-2026-102634/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:04:17 GMTCVECVE-2026-93838: SGLang through 0.5.20 Unbounded Memory Allocation via STAGING_REQ chunk_idxhttps://agentprime.io/advisories/CVE-2026-93838/https://agentprime.io/advisories/CVE-2026-93838/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 19:06:03 GMTCVECVE-2026-93688: SGLang through 0.5.19 Unbounded Memory Allocation via bootstrap_roomhttps://agentprime.io/advisories/CVE-2026-93688/https://agentprime.io/advisories/CVE-2026-93688/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 15:06:03 GMTCVECVE-2026-92972: SGLang through 0.5.19 Unauthenticated Route Poisoning via PUT endpointhttps://agentprime.io/advisories/CVE-2026-92972/https://agentprime.io/advisories/CVE-2026-92972/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 13:43:16 GMTCVE